138.68.55.147 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	SSH login attempts.	2020-10-10 23:27:05
attackspambots	SSH login attempts.	2020-10-10 15:16:18

Comments on same subnet:

IP	Type	Details	Datetime
138.68.55.193	attack	Invalid user charisse from 138.68.55.193 port 45654	2020-09-15 03:19:26
138.68.55.193	attackbotsspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-14 19:14:19
138.68.55.199	attackspam	Mar 17 08:35:54 php1 sshd\[8604\]: Invalid user xautomation from 138.68.55.199 Mar 17 08:35:54 php1 sshd\[8604\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.55.199 Mar 17 08:35:56 php1 sshd\[8604\]: Failed password for invalid user xautomation from 138.68.55.199 port 35208 ssh2 Mar 17 08:40:41 php1 sshd\[9275\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.55.199 user=root Mar 17 08:40:43 php1 sshd\[9275\]: Failed password for root from 138.68.55.199 port 59432 ssh2	2020-03-18 04:02:56
138.68.55.201	attack	SS5,WP GET /wp-login.php	2020-02-25 19:47:59
138.68.55.201	attackbotsspam	Wordpress login attempts	2019-11-19 22:53:53
138.68.55.201	attack	WordPress wp-login brute force :: 138.68.55.201 0.044 BYPASS [26/Sep/2019:13:56:51 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-26 12:56:42
138.68.55.201	attack	masters-of-media.de 138.68.55.201 \[05/Jul/2019:00:59:23 +0200\] "POST /wp-login.php HTTP/1.1" 200 5856 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" masters-of-media.de 138.68.55.201 \[05/Jul/2019:00:59:25 +0200\] "POST /wp-login.php HTTP/1.1" 200 5820 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-07-05 07:15:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.55.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8121
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.55.147.			IN	A

;; AUTHORITY SECTION:
.			408	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101000 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 10 15:16:14 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 147.55.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 147.55.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.56.96.33	attackspam	TCP (SYN) 210.56.96.33:64454 -> port 80, len 44	2020-06-23 18:58:21
77.55.237.160	attackspambots	2020-06-22 UTC: (19x) - a,ananda,daniel,gramm,jessie,ldx,oracle,paolo,root(6x),teamspeak,timo,user,user001,usuario	2020-06-23 18:42:02
51.254.75.176	attackspambots	Fail2Ban Ban Triggered	2020-06-23 18:48:08
157.230.125.207	attackbotsspam	$f2bV_matches	2020-06-23 18:50:14
119.96.129.106	attackspambots	Unauthorized connection attempt detected from IP address 119.96.129.106 to port 12968	2020-06-23 18:23:40
106.12.110.157	attackspambots	Invalid user jordan from 106.12.110.157 port 27117	2020-06-23 18:57:33
180.166.117.254	attackspam	Jun 22 08:24:51 Tower sshd[31532]: refused connect from 119.29.183.138 (119.29.183.138) Jun 22 15:27:09 Tower sshd[31532]: refused connect from 122.51.158.15 (122.51.158.15) Jun 23 04:17:10 Tower sshd[31532]: Connection from 180.166.117.254 port 5186 on 192.168.10.220 port 22 rdomain "" Jun 23 04:17:11 Tower sshd[31532]: Invalid user dw from 180.166.117.254 port 5186 Jun 23 04:17:11 Tower sshd[31532]: error: Could not get shadow information for NOUSER Jun 23 04:17:11 Tower sshd[31532]: Failed password for invalid user dw from 180.166.117.254 port 5186 ssh2 Jun 23 04:17:11 Tower sshd[31532]: Received disconnect from 180.166.117.254 port 5186:11: Bye Bye [preauth] Jun 23 04:17:11 Tower sshd[31532]: Disconnected from invalid user dw 180.166.117.254 port 5186 [preauth]	2020-06-23 18:45:24
60.167.178.40	attack	SSH invalid-user multiple login try	2020-06-23 18:19:13
1.163.42.212	attack	TCP (SYN) 1.163.42.212:26855 -> port 23, len 44	2020-06-23 18:38:38
103.141.136.150	attackspambots	170 packets to ports 3333 3388 3390 3398 3399 3400 8933 8989 13389 23389 33389 33890 33891 33892 33893 33894 33895 33896 33897 33898 33899 43389 53389 63389	2020-06-23 18:40:12
218.78.44.107	attackbotsspam	Jun 23 11:12:42 ns392434 sshd[27706]: Invalid user monit from 218.78.44.107 port 46936 Jun 23 11:12:42 ns392434 sshd[27706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.107 Jun 23 11:12:42 ns392434 sshd[27706]: Invalid user monit from 218.78.44.107 port 46936 Jun 23 11:12:44 ns392434 sshd[27706]: Failed password for invalid user monit from 218.78.44.107 port 46936 ssh2 Jun 23 11:41:31 ns392434 sshd[28330]: Invalid user wacos from 218.78.44.107 port 51696 Jun 23 11:41:31 ns392434 sshd[28330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.107 Jun 23 11:41:31 ns392434 sshd[28330]: Invalid user wacos from 218.78.44.107 port 51696 Jun 23 11:41:33 ns392434 sshd[28330]: Failed password for invalid user wacos from 218.78.44.107 port 51696 ssh2 Jun 23 11:45:47 ns392434 sshd[28457]: Invalid user user from 218.78.44.107 port 57488	2020-06-23 18:43:04
149.56.12.88	attackspambots	Jun 23 12:43:30 home sshd[7497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.12.88 Jun 23 12:43:33 home sshd[7497]: Failed password for invalid user jupyter from 149.56.12.88 port 33324 ssh2 Jun 23 12:46:42 home sshd[7809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.12.88 ...	2020-06-23 18:55:03
58.33.72.226	attackbotsspam	DATE:2020-06-23 09:27:33,IP:58.33.72.226,MATCHES:52,PORT:ssh	2020-06-23 18:51:02
114.67.80.134	attackspam	2020-06-22 UTC: (23x) - benutzer,caro,darwin,gs,hanson,kiran,kys,lko,q3server,root(5x),teamspeak3,test(2x),testa,unlock,user,vboxuser,vmail,zimbra	2020-06-23 18:24:58
185.175.93.14	attackspam	TCP (SYN) 185.175.93.14:44192 -> port 54520, len 44	2020-06-23 18:51:51

Recently Reported IPs

95.37.78.107	37.49.225.221	51.77.211.228	149.62.203.169
208.186.113.144	111.202.190.7	45.170.220.89	46.8.193.19
93.103.182.143	47.56.229.85	86.91.244.200	41.216.181.3
2.57.122.181	167.172.213.83	117.192.225.203	91.211.88.113
193.56.28.237	88.138.18.47	193.169.253.103	199.116.138.172